Vulnerable: version 7.7 is affected by 8 known vulnerabilities. See below.
www/squid7 7.7 NetBSD
Post-Harvest_cached WWW proxy cache and accelerator
- System
- NetBSD
- Repository
- pkgsrc
- Maintainer
- [email protected]
- Last update
- Commit
22c96173c0- License
- gnu-gpl-v2
- Categories
- www
- Package size
- 2641.8 KiB, 11298.2 KiB installed
Description
Squid is a fully-featured HTTP/1.0 proxy with partial HTTP/1.1 support The 7 series brings many new features and upgrades to the basic networking protocols. A short list of the major new features is:
Squid 7 represents a new feature release, the most important of these new features are:
* better support for overlapping IP ranges and wildcard domains in acl * countless security, portability, and documentation fixes
Since version 6, some previously deprecated features have been removed: * Edge Side Includes (ESI) * access to the cache manager using the cache_object:// scheme - use http instead * the squidclient tool - use curl http://<squid-address>/squid-internal-mgr/menu instead * the cachemgr.cgi tool * the purge tool - use the http PURGE method instead * Ident protocol support * basic_smb_lm_auth and ntlm_smb_lm_auth helpers - use Samba's ntlm_auth instead
In the other systems
Install
Binary package:
pkgin install squid
From pkgsrc:
cd /usr/pkgsrc/www/squid7 && make install clean
Packages
The version each package repository carries. “-” means the repository builds no package of it, “n/a” that there is no such repository.
| Repository | Version |
|---|---|
| NetBSD 10.1 x86_64 | 7.7 |
| NetBSD 10.1 aarch64 | 7.6 |
| SmartOS / illumos x86_64 | 7.7 |
| macOS 15 arm64 | 7.7 |
Dependencies
Run dependencies 2
Required by 1
Known vulnerabilities 8
- squid: cross-site-scripting (CVE-2018-19131)
- squid: memory-leak (CVE-2018-19132)
- squid: buffer-overflow (CVE-2019-12519)
- squid: cache-poisoning (CVE-2019-12520)
- squid: denial-of-service (CVE-2019-12521)
- squid: bypass-protection (CVE-2019-12522)
- squid: security-bypass (CVE-2019-12524)
- squid: cross-site-scripting (CVE-2019-13345)